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(57) Abstract: A DNS Proxy unit (A 12a) holds the domain name of a node to be subjected to encrypted communication in a CUG 
setting table (A 125a), intercepts a name resolution request for a communication partner node outputted to a DNS server (Bla) from 
an application (Allx), and references the CUG setting table (A125a) to judge whether the communication partner is a node to be 
subjected to encrypted communication. If the node is to be subjected to encrypted communication, the IP address of the communica- 
tion partner whose name has been resolved is registered in an encrypted communication setting table (A 142a). When the application 
(Allx) transmits a data packet to the TP address, it is intercepted by a data transmission/reception unit (A 14a) and the data packet 
destined to the IP address registered in the encrypted communication setting table (A 142a) is encrypted by a 
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communication encryption unit(Al41a) and transmitted to the communication partner. Thus, when performing encrypted communi- 
cation with a plurality of communication partners by using the communication encryption function provided by an OS, it is possible 
to set the node to be subjected to encrypted communication, by using a domain name. 



(57) Xft: DNS Proxy 6? (A 1 2a) I*. Bf ^biHIfcf&y - KCD K> *f >€ ^CUGta^T -:/;U(Al25a)fC«# L X 
9, T^U^-V3>(Allx)ANbDNS-9"-/^(Bla)ICtlJ$tl€>ii^ffl^> r - KlCft^£€l|il&^# £^ h 

U cuG^^-^;u(Ai25a)^#^LTii^ffi^^^fciiii^^y- K^S^^^JKrL. Bt^biHstt&y- K 
-Cfctitf. *fI»^^tifciifi^OiPT Kux^Bt^bii^Ki9:^ J r-^MAi42a)lcS^'r^o 7^'J<r->3 
>(AUx)^-ecDiP7 KUXjglr^-^/^^ h£&a-r&<t, &gt§SP(Ai4a)-TM — br 3f h 2*u f£#<b 

ilfiK^'r-^KA^a)^^^^!?^ KUX^CD-T— ^/^^ MiiIf5Bt^b^(A141a)^Bt^b£*U_>If5 

*l#K3i5i*;h.£o C(DJ;9i:LT, os^Ji^^^il^Bt^1t^fiE$fiimLT«»(Djlfeffi^i:Bt^biifs^fT 



